From Fedora Project Wiki

Warning: You are not logged in. Your IP address will be publicly visible if you make any edits. If you log in or create an account, your edits will be attributed to your username, along with other benefits.

The edit can be undone. Please check the comparison below to verify that this is what you want to do, and then publish the changes below to finish undoing the edit.

Latest revision Your text
Line 19: Line 19:


The following cast of characters will be available testing, workarounds, bug fixes, and general discussion ...
The following cast of characters will be available testing, workarounds, bug fixes, and general discussion ...
* Development - [[User:Stefw|Stefw]] (stefw), [[User:jhrozek|jhrozek]] (jhrozek-SSSD devel)(irc_nick2)
* Development - [[User:Stefw|Stefw]] (stefw), [[User:Developer2|Developer2]] (irc_nick2)
* Quality Assurance - [[User:ksrot|ksrot]] (ksrot), [[User:omoris|omoris]] (omoris), [[User:mvadkert|mvadkert]] (mvadkert), [[User:jpospisi|jpospisi]] (jpospisi)
* Quality Assurance - [[User:Tester1|Tester1]] (irc_nick1), [[User:Tester2|Tester2]] (irc_nick2)


== Prerequisite for Test Day ==  
== Prerequisite for Test Day ==  
Line 26: Line 26:
You need the following before joining in on the test day.
You need the following before joining in on the test day.


* '''Live CD:''' http://fedorapeople.org/~stefw/isos/ad-testday-dns-20121018.iso
* An updated [http://fedoraproject.org/get-prerelease Fedora 18 pre-release].
*: This Live CD is preconfigured to work with the [[Features/ActiveDirectory/TestBed#Red_Hat_Active_Directory_Test_Bed|Active Directory Test Bed]]. But you still need to set a local host name.
* realmd 0.9 installed from updates-testing, or from git master
* If you don't want to use the Live CD, you can use an updated [http://fedoraproject.org/get-prerelease Fedora 18 pre-release]
* An Active Directory domain to test against
* [https://admin.fedoraproject.org/updates/FEDORA-2012-16542/realmd-0.10-1.fc18 realmd 0.10] installed from updates-testing, or from git master (preinstalled on the LiveCD).
* An [[Features/ActiveDirectory/TestBed|Active Directory domain]] to test against.
* Domain user account or administrator account on the given Active Directory domain. See below for which test cases require which privileges.


== How to test? ==
== How to test? ==
Line 39: Line 36:
* '''realmd''' used together with Active Directory
* '''realmd''' used together with Active Directory
* '''sssd''' used together with Active Directory
* '''sssd''' used together with Active Directory
* '''control-center''' GNOME control center used with Enterprise Logins
* '''gnome-control-center''' used with Enterprise Logins
* '''gnome-online-accounts''' used with a Kerberos account
* '''gnome-online-accounts''' used with a Kerberos account
* '''gvfs''' used for SMB access with a Kerberos ticket


You can explore these, and their documentation. Or you can follow the test cases below.
You can explore these, and their documentation. Or you can follow the test cases below.
Line 49: Line 45:
{| class="wikitable sortable" style="width:100%" border="1"
{| class="wikitable sortable" style="width:100%" border="1"
!style="width:20%"|Testcase
!style="width:20%"|Testcase
!style="width:58%"|Description
!style="width:60%"|Description
!style="width:12%"|Privileges
!style="width:10%"|Target
!style="width:10%"|Approx. time required
!style="width:10%"|Approx. time required
|-   
|-   
| [[QA:Testcase_Active_Directory_no_krb5_conf|AD no krb5.conf]]  
| [[QA:Testcase_Active_Directory_no_krb5_conf|AD no krb5.conf]]  
| Using Active Directory without krb5.conf
| Using Active Directory without krb5.conf
| Any
| All
| 5 minutes
| 5 minutes
|-
|-
| [[QA:Testcase_Active_Directory_realmd_discovery|Discover AD]]   
| [[QA:Testcase_Active_Directory_realmd_discovery|Discover AD]]   
| Using realmd to discover information about an Active Directory domain
| Using realmd to discover information about an Active Directory domain
| Any
| All
| 5 minutes
| 5 minutes
|-
|-
| [[QA:Testcase_Active_Directory_realmd_join_sssd|Join AD with sssd]]   
| [[QA:Testcase_Active_Directory_realmd_join_sssd|Join AD with sssd]]   
| Using realmd to join an Active Directory domain with sssd as the client.
| Using realmd to join an Active Directory domain with sssd as the client.
| Domain user
| All
| 15 minutes
| 15 minutes
|-
|-
| [[QA:Testcase_Active_Directory_realmd_leave|Leave AD]]
| [[QA:Testcase_Active_Directory_realmd_leave|Leave AD]]
| Using realmd to leave an Active Directory domain.
| Using realmd to leave an Active Directory domain.
| Domain user
| All
| 15 minutes
| 15 minutes
|-
|-
| [[QA:Testcase_Active_Directory_realmd_leave_remove|Leave AD with remove]]
| [[QA:Testcase_Active_Directory_realmd_leave_remove|Leave AD with remove]]
| Using realmd to leave an Active Directory domain, removing the computer account.
| Using realmd to leave an Active Directory domain, removing the computer account.
| Domain user
| All
| 15 minutes
| 15 minutes
|-
|-
| [[QA:Testcase_Active_Directory_realmd_join_winbind|Join AD with winbind]]
| [[QA:Testcase_Active_Directory_realmd_join_winbind|Join AD with winbind]]
| Using realmd to join an Active Directory domain with winbind as the client.
| Using realmd to join an Active Directory domain with winbind as the client.
| Domain user
| All
| 15 minutes
| 15 minutes
|-
|-
| [[QA:Testcase_Active_Directory_realmd_login|Login with AD account]]
| [[QA:Testcase_Active_Directory_realmd_permit_one_login|Permit one login]]
| Using realmd permit one domain login, and then log in using that account
| Using realmd permit one domain login
| Domain user
| All
| 10 minutes
| 10 minutes
|-
|-
| [[QA:Testcase_Active_Directory_realmd_login_deny|Deny login for AD account]]
| [[QA:Testcase_Active_Directory_realmd_deny_one_login|Deny one login]]
| Using realmd deny one domain login.
| Using realmd deny one domain login
| Domain user
| All
| 10 minutes
| 10 minutes
|-
|-
| [[QA:Testcase_Active_Directory_realmd_login_any|Login with any AD account]]
| [[QA:Testcase_Active_Directory_realmd_permit_any_login|Permit any login]]
| Using realmd permit any domain login, and then log in using an account
| Using realmd permit any domain login
| Domain user
| All
| 10 minutes
| 10 minutes
|-
|-
| [[QA:Testcase_Active_Directory_realmd_login_deny_any|Deny login for any AD account]]
| [[QA:Testcase_Active_Directory_realmd_deny_any_login|Deny any login]]
| Using realmd deny any domain login.
| Using realmd deny any domain login
| Domain user
| All
| 10 minutes
| 10 minutes
|-
|-
| [[QA:Testcase_Active_Directory_realmd_join_automatic|Join AD automatic]]
| [[QA:Testcase_Active_Directory_realmd_join_automatic|Join AD automatic]]
| Using realmd to join an active directory domain automatically
| Using realmd to join an active directory domain automatically
| Domain admin
| All
| 20 minutes
| 20 minutes
|-
|-
| [[QA:Testcase_Active_Directory_realmd_join_otp|Join AD with OTP]]
| [[QA:Testcase_Active_Directory_realmd_join_otp|Join AD with OTP]]
| Using realmd to join an Active Directory domain with a one time password.
| Using realmd to join an Active Directory domain with a one time password.
| Domain admin
| All
| 20 minutes
| 20 minutes
|-
| [[QA:Testcase_Active_Directory_control_center|Control Center Enterprise Login]]
| Using Control Center to add an Enterprise Login (ie: a domain account), and testing login with that account.
| Domain user
| 20 minutes
|-
| [[QA:Testcase_Active_Directory_gvfs|GVfs access]]
| Using gvfs to access SMB shares with active kerberos ticket.
| Domain user
| 5 minutes
|}
|}


Line 129: Line 115:


* [https://bugs.freedesktop.org/enter_bug.cgi?product=realmd realmd bugzilla]   
* [https://bugs.freedesktop.org/enter_bug.cgi?product=realmd realmd bugzilla]   
* [https://bugzilla.gnome.org/enter_bug.cgi?product=gnome-control-center&component=User%20Accounts gnome-control-center bugzilla]   
* [https://bugszilla.gnome.org/enter_bug.cgi?product=gnome-control-center&component=User%20Accounts gnome-control-center bugzilla]   
* [https://bugzilla.gnome.org/enter_bug.cgi?product=gnome-online-accounts gnome-online-accounts bugzilla] 
* [https://bugszilla.gnome.org/enter_bug.cgi?product=gnome-online-accounts gnome-online-accounts bugzilla]   
* [https://bugzilla.gnome.org/enter_bug.cgi?product=gvfs&component=smb%20backend gvfs bugzilla]   
* [https://bugzilla.redhat.com Red Hat bugzilla]
* [https://bugzilla.redhat.com Red Hat bugzilla]
* [https://fedorahosted.org/sssd SSSD Trac]
{|
! User
! [[QA:Testcase_Active_Directory_no_krb5_conf|AD no krb5.conf]]
! [[QA:Testcase_Active_Directory_realmd_discovery|AD discovery]]
! [[QA:Testcase_Active_Directory_realmd_join_sssd|SSSD join]]
! [[QA:Testcase_Active_Directory_realmd_leave|Leave AD]]
! [[QA:Testcase_Active_Directory_realmd_leave_remove|Leave AD and remove account]]
! [[QA:Testcase_Active_Directory_realmd_join_winbind|winbind join]]
! [[QA:Testcase_Active_Directory_realmd_login|login]]
! [[QA:Testcase_Active_Directory_realmd_login_deny|deny login]]
! [[QA:Testcase_Active_Directory_realmd_login_any|permit any]]
! [[QA:Testcase_Active_Directory_realmd_login_deny_any|deny any]]
! [[QA:Testcase_Active_Directory_realmd_join_automatic|autojoin]]
! [[QA:Testcase_Active_Directory_realmd_join_otp|OTP join]]
! [[QA:Testcase_Active_Directory_control_center|control center]]
! [[QA:Testcase_Active_Directory_gvfs|gvfsd-smb]]
! References
|-
| [[User:SampleUser|Sample User]]
| {{result|none}}
| {{result|pass}}
| {{result|warn}} <ref>Test pass, {{bz|54321}}</ref>
| {{result|fail}} <ref>{{bz|12345}}</ref>
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| <references/>
|-
| [[User:mvadkert|mvadkert]]
| {{result|pass}}
| {{result|pass}}
| {{result|fail||867820}}- realm crashes when computer-ou empty, <ref>{{bz|867767}} - SELinux denials</ref>, <ref>{{bz|867769}} - man page typo</ref>
| {{result|fail}} <ref>{{bz|867767}} - SELinux denials preventing sssd to stop</ref>, works with disabled SELinux
| {{result|fail}} <ref>{{bz|867767}} - SELinux denials preventing sssd to stop</ref>, works with disabled SELinux
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| <references/>
|-
| [[User:wzzrd|Maxim Burgerhout]]
| {{result|pass}}
| {{result|pass}}
| {{result|fail}} <ref>{{bz|867765}}; works without SELinux</ref>
| {{result|fail}} <ref>same</ref>
| {{result|fail}} <ref>same</ref>
| {{result|fail}} <ref>Join works, but samba-client and samba-winbind packages are not installed {{bz|867873}}</ref>
| {{result|warn}} <ref>Works, but group names are not resolved {{bz|867874}}</ref>
| {{result|pass}} <ref>setenforce 0</ref>
| {{result|pass}} <ref>setenforce 0</ref>
| {{result|pass}} <ref>setenforce 0</ref>
| {{result|pass}} <ref>setenforce 0</ref>
| {{result|pass}} <ref>setenforce 0</ref>
| {{result|none}}
| {{result|pass}}
| <references/>
|-
| [[User:omoris|omoris]]
| {{result|pass}}
| {{result|pass}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| <references/>
|-
| [[User:Stijn|Stijn]]
| {{result|pass}}
| {{result|pass}}
| {{result|fail}} <ref>AVC denials ({{bz|867765}}), incorrect DNS registration ({{bz|867864}}, {{bz|867915}}), works with setenforce 0</ref>
| {{result|warn}} <ref>AVC denials ({{bz|867765}}), works with setenforce 0</ref>
| {{result|warn}} <ref>AVC denials ({{bz|867765}}), works with setenforce 0</ref>
| {{result|warn}} <ref>with workaroud ({{bz|867873}}) tests pass, winbind warns about log file ({{bz|867893}})</ref>
| {{result|warn}} <ref>Works, but groups are not resolved {{bz|867874}}</ref>
| {{result|pass}} <ref>with setenforce 0, I did not check audit logs</ref>
| {{result|pass}} <ref>with setenforce 0, I did not check audit logs</ref>
| {{result|pass}} <ref>with setenforce 0, I did not check audit logs</ref>
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| <references/>
|-
| [[User:Stefw|stefw]]
| {{result|pass}}
| {{result|pass}}
| {{result|fail||867767}}
| {{result|warn}} <ref>with setenforce 0</ref>
| {{result|warn}} <ref>with setenforce 0</ref>
| {{result|fail||867873}}
| {{result|warn||867874}}
| {{result|warn}} <ref>https://bugzilla.gnome.org/show_bug.cgi?id=686385</ref>
| {{result|warn||867874}}
| {{result|warn}} <ref>https://bugs.freedesktop.org/show_bug.cgi?id=56144</ref>
| {{result|fail}} <ref>https://bugs.freedesktop.org/show_bug.cgi?id=56147 https://bugs.freedesktop.org/show_bug.cgi?id=56148</ref>
| {{result|warn}} <ref>https://bugs.freedesktop.org/show_bug.cgi?id=56147</ref>
| {{result|fail}} <ref>https://bugzilla.gnome.org/show_bug.cgi?id=686390</ref>
| {{result|pass}}
| <references/>
|-
| [[User:jpospisi|jpospisi]]
| {{result|pass}}
| {{result|pass}}
| {{result|warn}} <ref>{{bz|867873}} all testcases past this one were tested with 'setenforce 0'</ref>
| {{result|pass}}
| {{result|pass}} <ref>I had access to the server. Checked that computer was successfully removed.</ref>
| {{result|warn||867873}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| <references/>
|-
| [[User:ksrot|ksrot]]
| {{result|pass}}
| {{result|warn||867767}}
| {{result|fail||867765|867807}}
| {{result|fail||867765}}
| {{result|fail||867873}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
<references/>
|-
| [[User:jscotka|jscotka]]
| {{result|pass}}
| {{result|pass}}
| {{result|fail||867873}}
| {{result|pass}}
| {{result|pass}}
| {{result|pass}} but seems slow
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
<references/>
|-
| [[User:psklenar|psklenar]]
| {{result|pass}}
| {{result|fail||867820}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
<references/>
|-
| [[User:tbzatek|tbzatek]]
| {{result|pass}}
| {{result|pass}}
| {{result|warn||867767}}
| {{result|warn||867767}}
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|none}}
| {{result|none}}
<references/>
|-
| [[User:pkis|pkis]]
| {{result|pass}}
| {{result|pass}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| {{result|none}}
| <references/>
|-
| [[User:Adamjosephcook|Adam Joseph Cook]]
| {{result|pass}}
| {{result|pass}}
| {{result|warn||867873}} <ref>Disabled SELinux (setenforce 0). Step 4 may be incorrect - system had to restarted to find keytab.</ref>
| {{result|warn}} <ref>Disabled SELinux (setenforce 0) - will not pass otherwise.</ref>
| {{result|warn}} <ref>Disabled SELinux (setenforce 0) - will not pass otherwise.</ref>
| {{result|warn}} <ref>Disabled SELinux (setenforce 0) - will not pass otherwise.</ref>
| {{result|warn||825498|867874}}<ref>Disabled SELinux (setenforce 0) - will not pass otherwise.</ref>
| {{result|inprogress}} <ref>Had to suspend testing, significant nouveau issues with FC18 - not related to AD. Will finish in coming days.</ref>
| {{result|inprogress}}
| {{result|inprogress}}
| {{result|inprogress}}
| {{result|inprogress}}
| {{result|inprogress}}
| {{result|inprogress}}
| <references/>
|-
| [[User:Vpodzime|vpodzime]]
(all with setenforce&nbsp;0)
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|warn}} <ref group="long">Computer not removed from the Active Directory, only a liitle arrow appeared in the computer icon [http://vpodzime.fedorapeople.org/removed_computer.png screenshot]</ref>
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|pass}}
| {{result|pass}} <ref>Some problems appeared during testing, but were caused by the leftovers from the previous testing.</ref>
| {{result|pass}}
| {{result|pass}} <ref>The user was listed in the GDM's list.</ref>
| {{result|pass}}
| <references/>
|}
== Long comments ==
<references group="long" />


[[Category:Fedora 18 Test Days|a]]
[[Category:Test Days]]
[[Category:QA Templates]]
Please note that all contributions to Fedora Project Wiki are considered to be released under the Attribution-Share Alike 4.0 International (see Fedora Project Wiki:Copyrights for details). If you do not want your writing to be edited mercilessly and redistributed at will, then do not submit it here.
You are also promising us that you wrote this yourself, or copied it from a public domain or similar free resource. Do not submit copyrighted work without permission!

To edit this page, please solve the following task below and enter the answer in the box (more info):

Cancel Editing help (opens in new window)

Templates used on this page:

Retrieved from "https://fedoraproject.org/wiki/Test_Day:2012-10-18_Active_Directory"